Cloudflared Config Generator
Generate secure configuration files for your Cloudflare Tunnel. Easily map subdomains to local services like NextCloud, SSH, or Plex.
Global Settings
Found in Cloudflare Dashboard > Zero Trust > Access > Tunnels
Default location on Linux systems
Ingress Rules
Map your public subdomains to local services
Generated Config (config.yml)
Copy this to /etc/cloudflared/config.yml
tunnel: <UUID-TUNNEL-ID>
credentials-file: /root/.cloudflared/cert.json
ingress:
- hostname: nextcloud.example.com
service: http://localhost:8080
- hostname: ssh.example.com
service: ssh://localhost:22
- service: http_status:404
Did you know?
The last rule
http_status:404 acts as a catch-all. It ensures traffic to unknown subdomains is safely rejected instead of exposing random services.